Riskcovery

CVE-2025-40080

nbd: restrict sockets to TCP and UDP

State
Published
Severity
Not scored
Published
Oct 28, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nbd: restrict sockets to TCP and UDP

Recently, syzbot started to abuse NBD with all kinds of sockets.

Commit cf1b2326b734 ("nbd: verify socket is supported during setup") made sure the socket supported a shutdown() method.

Explicitely accept TCP and UNIX stream sockets.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cf1b2326b734896734c6e167e41766f9cee7686a to before c365e8f20f4201d873a70385bd919f0fb531e960Affected
  • cf1b2326b734896734c6e167e41766f9cee7686a to before 4f9e6ff6319dbcebea64b50af0304cf0ad7e97e7Affected
  • cf1b2326b734896734c6e167e41766f9cee7686a to before 37ad11f20e164c23ce827dd455b42c0fdd29685cAffected
  • cf1b2326b734896734c6e167e41766f9cee7686a to before 808e2335bc1cf2293b9e36ccc94c267c81509c71Affected
  • cf1b2326b734896734c6e167e41766f9cee7686a to before 9f7c02e031570e8291a63162c6c046dc15ff85b0Affected
  • 4df728651b8a99693c69962d8e5a5b9e5a3bbcc7Affected
  • 083322455c67d278c56a66b73f1221f004ee600aAffected
  • 4fa1cbd587ef967812f9d9f6ce46ec1dead7502cAffected
  • 4.14.152 to before 4.15Affected
  • 4.19.82 to before 4.20Affected
  • 5.3.9 to before 5.4Affected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 6.1.156 through 6.1.*Not affected
  • 6.6.112 through 6.6.*Not affected
  • 6.12.53 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.